AWS network-firewall documentation change
Summary
Added JSON formatting markers and updated CloudWatch Logs ARN examples
Security assessment
Improved documentation for logging permissions configuration. Enhances security documentation but doesn't fix vulnerabilities.
Diff
diff --git a/network-firewall/latest/developerguide/logging-cw-logs.md b/network-firewall/latest/developerguide/logging-cw-logs.md index 0b2d2c78b..08ab5b42d 100644 --- a//network-firewall/latest/developerguide/logging-cw-logs.md +++ b//network-firewall/latest/developerguide/logging-cw-logs.md @@ -44,0 +45,6 @@ You must have the following permissions settings to configure your firewall to s +JSON + + +**** + + @@ -71 +77 @@ You must have the following permissions settings to configure your firewall to s - "CloudWatch Logs log group ARN" + "arn:aws:logs:us-east-1:123456789012:log-group:log-group-name" @@ -101,0 +109,6 @@ The following view shows both standard CloudWatch permissions and the additional +JSON + + +**** + + @@ -125 +138 @@ The following view shows both standard CloudWatch permissions and the additional - "logs:DescribeLogGroups", + "logs:DescribeLogGroups" @@ -128 +141 @@ The following view shows both standard CloudWatch permissions and the additional - "CloudWatch Logs log group ARN" + "arn:aws:logs:us-east-1:123456789012:log-group:log-group-name"